CVE-2026-54679

Published: June 26, 2026Last modified: June 26, 2026

Description

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2.

Status

Product	Release	Package	Status
Alpaquita Linux	Stream	jq	Fixed (1.8.2-r0)

References

https://github.com/jqlang/jq/security/advisories/GHSA-29gj-222p-j7vx

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.